Privacy Policy

In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”) and Slovak Act No. 18/2018 Coll. on Personal Data Protection, this document explains how we process the personal data of guests of kiva cabin and visitors to kivacabins.sk.

1. Controller

Feel Free Production s.r.o., registered office Jakabova 3608/32, 821 04 Bratislava, Slovak Republic, Company ID (IČO): 46918124, registered in the Commercial Register of the Bratislava III Municipal Court, Section: Sro, Insert No. 86108/B (“Controller” or “we”).
Contact for data protection matters: info@kivacabins.sk, +421 918 881 884

The Controller has not appointed a data protection officer, as it is not required to do so under Article 37 GDPR.

2. Purposes, legal bases and retention periods

2.1 Booking and provision of accommodation

  • Data: first name, surname, email, phone number, dates of stay, number of guests, booking notes, payment details.
  • Purpose: handling booking requests, concluding and performing the accommodation contract, communicating with the guest.
  • Legal basis: Article 6(1)(b) GDPR – performance of a contract and pre-contractual steps.
  • Retention: for the duration of the contractual relationship and its settlement.

2.2 Guest registration and other legal obligations

  • Data: first name, surname, date of birth, permanent address, type and number of identity document, nationality, dates of stay, accounting data.
  • Purpose: keeping the register of guests, reporting the stay of foreign nationals, administering the local accommodation tax, bookkeeping.
  • Legal basis: Article 6(1)(c) GDPR – compliance with legal obligations, in particular under Act No. 404/2011 Coll. on the Residence of Foreigners, Act No. 582/2004 Coll. on Local Taxes and Act No. 431/2002 Coll. on Accounting.
  • Retention: for the periods set by these laws (e.g. accounting documents for 10 years).

2.3 Contact form and email communication

  • Data: name, email address, content of the message.
  • Purpose: responding to your question or request.
  • Legal basis: Article 6(1)(f) GDPR – legitimate interest in answering enquiries; where the enquiry concerns concluding a contract, Article 6(1)(b) GDPR.
  • Retention: as long as necessary to handle the enquiry, no longer than 1 year.

2.4 Establishment and defence of legal claims

  • Data: booking data and communication with the guest.
  • Legal basis: Article 6(1)(f) GDPR – legitimate interest in establishing or defending legal claims.
  • Retention: for the limitation period, generally 3 years after the end of the stay.

2.5 Cookies

The website uses strictly necessary cookies and, with the visitor’s consent, other cookies. You can change or withdraw your consent at any time. Details are available in our Cookie Policy.

3. Obligation to provide personal data

Providing the data needed for a booking is a contractual requirement; without it, the booking cannot be handled. Guests are legally required to provide the data needed for guest registration. Providing data via the contact form is voluntary.

4. Recipients of personal data

To the extent necessary, personal data may be disclosed to the following categories of recipients:

  • web hosting and website maintenance providers,
  • email and communication service providers,
  • external accounting service providers,
  • public authorities where required by law (e.g. the municipality, the police, tax authorities).

We do not sell personal data or share it with third parties for marketing purposes.

5. Transfers to third countries

Some of our service providers (e.g. email providers) may process personal data outside the European Economic Area. In such cases, transfers take place only on the basis of a European Commission adequacy decision (e.g. the EU–US Data Privacy Framework) or standard contractual clauses approved by the European Commission.

6. Automated decision-making and profiling

We do not carry out automated decision-making or profiling.

7. Your rights

As a data subject, you have the right to:

  • access your personal data (Article 15 GDPR),
  • rectification of inaccurate data (Article 16 GDPR),
  • erasure of your personal data (Article 17 GDPR),
  • restriction of processing (Article 18 GDPR),
  • data portability (Article 20 GDPR),
  • object to processing based on legitimate interest (Article 21 GDPR),
  • withdraw your consent at any time, without affecting the lawfulness of processing before its withdrawal (Article 7(3) GDPR).

You can exercise your rights by email at info@kivacabins.sk. We will respond without undue delay and no later than one month after receiving your request.

If you believe that the processing of your personal data infringes the law, you have the right to lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk, or with the supervisory authority in your EU country of residence.

8. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.

9. Final provisions

We may update this information from time to time. The current version is always published on this page. This Privacy Policy is effective from 23 September 2026. It is a translation of the Slovak original; in case of any discrepancy, the Slovak version prevails.